sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-06-04 13:13:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix for DNS leakage

Browse Source
This commit is contained in:
Miroslav Stampar 2011-06-17 15:23:58 +00:00
parent 9498a3f259
commit bb987ec98f
1 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
lib/core/option.py
View File

@ -80,6 +80,7 @@ from lib.core.optiondict import optDict
from lib.core.settings import CODECS_LIST_PAGE from lib.core.settings import CODECS_LIST_PAGE
from lib.core.settings import DEFAULT_PAGE_ENCODING from lib.core.settings import DEFAULT_PAGE_ENCODING
from lib.core.settings import DEFAULT_TOR_PORTS from lib.core.settings import DEFAULT_TOR_PORTS
from lib.core.settings import GENERAL_IP_ADDRESS_REGEX
from lib.core.settings import IS_WIN from lib.core.settings import IS_WIN
from lib.core.settings import PLATFORM from lib.core.settings import PLATFORM
from lib.core.settings import PYVERSION from lib.core.settings import PYVERSION
@ -829,8 +830,12 @@ def __setDNSCache():
""" """
def _getaddrinfo(*args, **kwargs): def _getaddrinfo(*args, **kwargs):
if args in kb.cache: if conf.proxyDNSResponse:
return conf.proxyDNSResponse
elif args in kb.cache:
return kb.cache[args] return kb.cache[args]
else: else:
kb.cache[args] = socket._getaddrinfo(*args, **kwargs) kb.cache[args] = socket._getaddrinfo(*args, **kwargs)
return kb.cache[args] return kb.cache[args]
@ -897,6 +902,17 @@ def __setHTTPProxy():
else: else:
proxyHandler = urllib2.ProxyHandler({"http": __proxyString}) proxyHandler = urllib2.ProxyHandler({"http": __proxyString})
# Patch for DNS leakage
if conf.proxy:
if not re.match(GENERAL_IP_ADDRESS_REGEX, __hostname):
try:
addrinfo = socket.getaddrinfo(__hostname, __port)
except:
errMsg = "proxy host '%s' does not exist" % __hostname
raise sqlmapConnectionException, errMsg
__hostname = addrinfo[0][4][0]
conf.proxyDNSResponse = [(2, 1, 0, '', (__hostname, int(__port)))]
def __setSafeUrl(): def __setSafeUrl():
""" """
Check and set the safe URL options. Check and set the safe URL options.
@ -1323,6 +1339,7 @@ def __setConfAttributes():
conf.parameters = {} conf.parameters = {}
conf.path = None conf.path = None
conf.port = None conf.port = None
conf.proxyDNSResponse = None
conf.resultsFilename = None conf.resultsFilename = None
conf.resultsFP = None conf.resultsFP = None
conf.scheme = None conf.scheme = None